Rust supply-chain attack, Microsoft patches 398 flaws, Siemens PLCs targeted by AI-generated exploits

This briefing reports multiple high-risk incidents: a Rust supply-chain attack that introduced build-time malware into widely used crates, suspected Russian espionage campaigns abusing OAuth and WhatsApp linking to hijack accounts of government and defense-affiliated personnel, AI-generated exploit scripts targeting Siemens S7 PLCs in critical infrastructure, Microsoft releasing patches including one actively exploited flaw, and a CareCloud breach exposing 3.7M records — recommended actions include urgent patching, CI/CD audits, enforcing phishing-resistant MFA, OT segmentation, and monitoring for infostealer indicators.